CVE-2006-3324

CVE-2006-3324 describes a file overwrite vulnerability in the id3 Quake 3 Engine and Icculus Quake 3 Engine (ioquake3) prior to revision 804. This flaw allows remote attackers to overwrite arbitrary files within the game's directory by manipulating the "Automatic Downloading" option with an overly long filename string. Rated with a CVSS score of 5.0 (AV:N/AC:L/Au:N/C:N/I:P/A:N), it indicates a network-based attack with low complexity, requiring no authentication, and resulting in partial integrity impact. While no Metasploit or Nuclei exploits exist, an ExploitDB entry (EDB-1976) for a remote overflow in CG_ServerCommand() suggests potential exploitability, though there is no evidence of active exploitation or significant community discussion.